Privacy policy

Privacy

I. Identification of the company/operator and legal regulations in the field of personal data protection

The company weit s. r. o., with registered office at Kríková 18, 821 07 Bratislava, ID: 53 214 102, registered in the commercial register of the Bratislava I District Court, department Ltd., vl. no. 148416/B (hereinafter also referred to as the "company" or the "operator") is responsible for complying with the relevant legal regulations on the protection of personal data, in particular the Regulation of the European Parliament and the Council (EU) 2016/679 of 27. of April 2016 on the protection of natural persons in the processing of personal data and on the free movement of such data, which repeals Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as "GDPR") and Act No. 18/2018 Coll. on the protection of personal data and on the amendment of certain laws as amended (hereinafter referred to as the "Act on the Protection of Personal Data").

II. Terms arising from the Personal Data Protection Act

Data subject - any natural person whose personal data is processed.

Personal data - data relating to an identified natural person or an identifiable natural person who can be identified directly or indirectly, especially on the basis of a generally applicable identifier, another identifier, such as name, surname, identification number, location data, or online identifier, or on based on one or more characteristics or signs that make up its physical identity, physiological identity, genetic identity, psychological identity, mental identity, economic identity, cultural identity or social identity.

Operator - anyone who, alone or jointly with others, defines the purpose and means of processing personal data and processes personal data on their own behalf; the operator or specific requirements for its determination may be established in a special regulation or international agreement to which the Slovak Republic is bound, if such regulation or this agreement establishes the purpose and means of personal data processing.

Processing of personal data - a processing operation or a set of processing operations with personal data or with sets of personal data, in particular obtaining, recording, organizing, structuring, storing, changing, searching, viewing, using, providing by transmission, dissemination or in another way, rearranging or combining, restriction, erasure, regardless of whether it is done by automated means or non-automated means.

Consent of the person concerned - any serious and freely given, specific, informed and unambiguous expression of the will of the person concerned in the form of a statement or a clear affirmative act by which the person concerned expresses his consent to the processing of his personal data.

III. Processing of personal data

1. The company processes personal data of the statutory body of the company with which it is in a contractual relationship (on the basis of which it provides its services) in the scope of:

NAME, SURNAME, TITLE,

FEATURE, EMAIL, PHONE,

PERMANENT ADDRESS

As well as personal data of employees - contact persons of the company with which it has a contractual relationship in the scope of:

NAME, SURNAME, TITLE

FUNCTION, E-MAIL, PHONE.

2. The personal data of the persons concerned referred to in point 1 of this article are processed for the purpose of securing the subject of the Mandate Agreement concluded pursuant to § 566 et seq. Act No. 513/1991 Coll. Commercial Code, as amended (hereinafter referred to as the "contract"). The legal basis for processing the personal data of the persons concerned is the fulfillment of the contract in accordance with § 13 par. 1 letter b) of the Personal Data Protection Act.

3. The operator processes the personal data of the affected persons exclusively in a manner that corresponds to the purpose for which they were collected and in accordance with the Personal Data Protection Act and the GDPR.

4. The processing of personal data includes their acquisition, collection, recording, arrangement, search and storage on the basis of special legal regulations, which is Act no. 79/2015 Coll. on waste and on the amendment and supplementation of certain laws as amended and relevant implementing regulations to this law.

5. The personal data of the persons concerned may be provided to public authorities, respectively. public institutions, especially in the case of:

fulfillment of the company's legal obligation to the extent according to the relevant legal regulations

proving/asserting the company's legal claims

prevention, detection, investigation and prosecution of illegal actions

6. The personal data of the persons concerned must also be provided in accordance with the special regulations listed in point 4 of this article:

a) Ministry of the Environment of the Slovak Republic,

b) District Office - Environmental Care Department,

c) Slovak Environmental Inspection of the Slovak Republic,

d) The relevant producer responsibility organization,

e) Collection company.

IV. Statement of the company/operator and protection of personal data of affected persons

1. The company cares about the protection of personal data of the persons concerned and observes the rules of personal data protection in accordance with the applicable legal regulations on the protection of personal data. Through this document, the operator provides data subjects with comprehensive information according to the Personal Data Protection Act, as well as other important information and explanations for the purpose of creating transparency, also with regard to Article 13 and 14 of the GDPR.

2. The company declares that it has adopted adequate technical, organizational and security measures in order to ensure the security of the processing of personal data of the persons concerned. In particular, it has taken measures to ensure that the personal data of the affected persons is protected against unwanted access to the greatest extent possible.

3. The company undertakes not to sell or commercially use the personal data it has obtained from the affected persons as part of business cooperation with any third party and not to publish any personal data obtained from the affected persons without the affected persons expressing their express consent.

4. The company will not process the personal data of the persons concerned using a decision based on automated, partially automated means and non-automated means of personal data processing and so-called profiling.

V. Storage period of personal data of the persons concerned

1. The company stores the personal data of the persons concerned for the time necessary to achieve the purpose for which the personal data of the persons concerned were provided to the company. As soon as the contracting parties terminate the contractual cooperation, the personal data of the person concerned will be deleted within three months from the termination of the contractual cooperation. Data that, in accordance with a special legal obligation, will need to be stored for a longer period of time will only be stored for the necessary time in accordance with the relevant special law.

VI. The rights of data subjects in accordance with the Personal Data Protection Act

1. Right to information

The affected person has the right to request information from the company at any time about the provided personal data that the company processes, their origin, the purpose of personal data processing, the category of personal data processing, the identification of the recipient or the category of recipient to whom the personal data was provided and the period of storage of personal data , if this is not possible, information on the criteria for its determination.

2. Right of access to personal data

The person concerned has the right to access his personal data and the right to provide his personal data. In this case, if the person concerned requires access to personal data, the company is obliged to grant such access without delay. For the repeated provision of personal data requested by the data subject, the company may charge a reasonable fee corresponding to administrative costs. The company is obliged to provide personal data to the person concerned in a manner according to his request.

3. The right to withdraw consent to the processing of personal data

If the person concerned has given consent to the processing of personal data, he is entitled to revoke it at any time, without giving reasons and with immediate effect. In case of revocation of the granted consent of the person concerned, the company will stop processing the personal data of the person concerned and the personal data will be deleted, if there is no other legal basis for their further processing. The withdrawal of consent to the processing of personal data will not affect the legality of the processing based on the consent before its withdrawal.

4. The right to correct personal data

The person concerned has the right to correct incorrect personal data concerning him. The affected person also has the right to supplement his/her incomplete personal data. In the event that the stored data is incorrect or incomplete, the data subject may request its correction at any time.

5. The right to erasure of personal data

The affected person has the right to delete personal data processed by the company.

The company is obliged to delete the personal data of the data subject without undue delay, if the data subject has exercised the right to deletion, if:

a) personal data are no longer necessary for the purpose for which they were obtained or otherwise processed,

b) the person concerned revokes his consent, on the basis of which the processing of personal data is carried out, and there is no other legal basis for the processing of personal data,

c) the person concerned objects to the processing of personal data according to § 27 par. 1 and 2 of the Personal Data Protection Act,

d) the personal data of the person concerned is processed illegally.

The company will delete personal data relating to the person concerned without undue delay, at the latest within one month after exercising this right. Deletion of the personal data of the person concerned will be carried out based on the request of the person concerned, which the person concerned sends to the e-mail address of the company listed at the end of this document. If the deletion of the data subject's personal data contradicts the legal obligations to retain data, the data subject's personal data will not be deleted. The right to erasure of personal data shall not apply in the cases referred to in § 23 par. 4 of the Personal Data Protection Act.

6. The right to limit the processing of personal data

The person concerned has the right to limit the processing of personal data if:

a) the person concerned objects to the correctness of the personal data, during the period allowing the company to verify the correctness of the personal data,

b) the processing of personal data is illegal and the data subject objects to the deletion of personal data and instead requests a limitation of their use,

c) the company no longer needs personal data for the purpose of processing personal data, but the data subject needs them to assert a legal claim, or

d) the person concerned objects to the processing of personal data according to § 27 par. 1 of the Personal Data Protection Act, until it is verified whether the legitimate reasons on the part of the company prevail over the legitimate reasons of the person concerned.

7. Right to portability of personal data

In the event that the person concerned requests from the company his personal data, which the company processes, the company will issue or transfer this personal data to the person concerned or to another person who is the operator, in a structured and commonly used readable format. The above applies only if it is technically possible.

8. The right to object to the processing of personal data

The person concerned has the right to object to the processing of personal data for the purpose of direct marketing, including the so-called profiling.

The person concerned has the right to object to the processing of personal data concerning him for reasons related to his specific situation. In the event of such an objection, the company will not further process the personal data of the person concerned, unless there are necessary legitimate reasons for their further processing or reasons for proving/asserting the company's legal claims.

9. The right not to be the subject of automated individual decision-making, including profiling

The person concerned has the right not to be subject to a decision based solely on the automated processing of personal data, including the so-called profiling and which has legal effects that relate to it or similarly significantly affect it. This right of the person concerned does not apply if the decision is:

a) necessary for the conclusion or performance of the contract between the person concerned and the company,

b) carried out on the basis of a special regulation or an international treaty to which the Slovak Republic is bound, and which also provide for appropriate measures guaranteeing the protection of the rights and legitimate interests of the person concerned,

c) is based on the express consent of the person concerned.

10. Right to File a Complaint

If the person concerned wants to file a complaint, he can do so by sending an e-mail to the email address: info@weit.sk or by sending a written complaint to the address: Kríková 18, 821 07 Bratislava.

11. The right to file a motion to initiate proceedings

In case of suspicion of unauthorized processing of his personal data, the affected person has the right to submit a proposal for initiation of personal data protection proceedings to the Personal Data Protection Office of the Slovak Republic, with registered office at Hraničná 4, 820 07 Bratislava, pursuant to § 100 of the Personal Data Protection Act.

VII. Cross-border transfer of personal data

1. The company will not carry out any cross-border transfer of personal data of the persons concerned to a third country that does not guarantee an adequate level of personal data protection. The personal data of the persons concerned, which will be processed, will not be transferred from the territory of the member states of the European Union to third countries.

VIII. Questions regarding the protection of personal data of the person concerned - contact the company/operator

If the person concerned has questions or inquiries regarding the protection of his personal data, he can contact the company weit s. r. about.:

weit s. r. o.

headquarter: Kríková 18, 821 07 Bratislava

e-mail contact: info@weit.sk

telephone contact: +421 947 930 494

This document on the protection of personal data takes effect from 01.01.2023.

Privacy

I. Identification of the company/operator and legal regulations in the field of personal data protection

The company weit s. r. o., with registered office at Kríková 18, 821 07 Bratislava, ID: 53 214 102, registered in the commercial register of the Bratislava I District Court, department Ltd., vl. no. 148416/B (hereinafter also referred to as the "company" or the "operator") is responsible for complying with the relevant legal regulations on the protection of personal data, in particular the Regulation of the European Parliament and the Council (EU) 2016/679 of 27. of April 2016 on the protection of natural persons in the processing of personal data and on the free movement of such data, which repeals Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as "GDPR") and Act No. 18/2018 Coll. on the protection of personal data and on the amendment of certain laws as amended (hereinafter referred to as the "Act on the Protection of Personal Data").

II. Terms arising from the Personal Data Protection Act

Data subject - any natural person whose personal data is processed.

Personal data - data relating to an identified natural person or an identifiable natural person who can be identified directly or indirectly, especially on the basis of a generally applicable identifier, another identifier, such as name, surname, identification number, location data, or online identifier, or on based on one or more characteristics or signs that make up its physical identity, physiological identity, genetic identity, psychological identity, mental identity, economic identity, cultural identity or social identity.

Operator - anyone who, alone or jointly with others, defines the purpose and means of processing personal data and processes personal data on their own behalf; the operator or specific requirements for its determination may be established in a special regulation or international agreement to which the Slovak Republic is bound, if such regulation or this agreement establishes the purpose and means of personal data processing.

Processing of personal data - a processing operation or a set of processing operations with personal data or with sets of personal data, in particular obtaining, recording, organizing, structuring, storing, changing, searching, viewing, using, providing by transmission, dissemination or in another way, rearranging or combining, restriction, erasure, regardless of whether it is done by automated means or non-automated means.

Consent of the person concerned - any serious and freely given, specific, informed and unambiguous expression of the will of the person concerned in the form of a statement or a clear affirmative act by which the person concerned expresses his consent to the processing of his personal data.

III. Processing of personal data

1. The company processes personal data of the statutory body of the company with which it is in a contractual relationship (on the basis of which it provides its services) in the scope of:

NAME, SURNAME, TITLE,

FEATURE, EMAIL, PHONE,

PERMANENT ADDRESS

As well as personal data of employees - contact persons of the company with which it has a contractual relationship in the scope of:

NAME, SURNAME, TITLE

FUNCTION, E-MAIL, PHONE.

2. The personal data of the persons concerned referred to in point 1 of this article are processed for the purpose of securing the subject of the Mandate Agreement concluded pursuant to § 566 et seq. Act No. 513/1991 Coll. Commercial Code, as amended (hereinafter referred to as the "contract"). The legal basis for processing the personal data of the persons concerned is the fulfillment of the contract in accordance with § 13 par. 1 letter b) of the Personal Data Protection Act.

3. The operator processes the personal data of the affected persons exclusively in a manner that corresponds to the purpose for which they were collected and in accordance with the Personal Data Protection Act and the GDPR.

4. The processing of personal data includes their acquisition, collection, recording, arrangement, search and storage on the basis of special legal regulations, which is Act no. 79/2015 Coll. on waste and on the amendment and supplementation of certain laws as amended and relevant implementing regulations to this law.

5. The personal data of the persons concerned may be provided to public authorities, respectively. public institutions, especially in the case of:

fulfillment of the company's legal obligation to the extent according to the relevant legal regulations

proving/asserting the company's legal claims

prevention, detection, investigation and prosecution of illegal actions

6. The personal data of the persons concerned must also be provided in accordance with the special regulations listed in point 4 of this article:

a) Ministry of the Environment of the Slovak Republic,

b) District Office - Environmental Care Department,

c) Slovak Environmental Inspection of the Slovak Republic,

d) The relevant producer responsibility organization,

e) Collection company.

IV. Statement of the company/operator and protection of personal data of affected persons

1. The company cares about the protection of personal data of the persons concerned and observes the rules of personal data protection in accordance with the applicable legal regulations on the protection of personal data. Through this document, the operator provides data subjects with comprehensive information according to the Personal Data Protection Act, as well as other important information and explanations for the purpose of creating transparency, also with regard to Article 13 and 14 of the GDPR.

2. The company declares that it has adopted adequate technical, organizational and security measures in order to ensure the security of the processing of personal data of the persons concerned. In particular, it has taken measures to ensure that the personal data of the affected persons is protected against unwanted access to the greatest extent possible.

3. The company undertakes not to sell or commercially use the personal data it has obtained from the affected persons as part of business cooperation with any third party and not to publish any personal data obtained from the affected persons without the affected persons expressing their express consent.

4. The company will not process the personal data of the persons concerned using a decision based on automated, partially automated means and non-automated means of personal data processing and so-called profiling.

V. Storage period of personal data of the persons concerned

1. The company stores the personal data of the persons concerned for the time necessary to achieve the purpose for which the personal data of the persons concerned were provided to the company. As soon as the contracting parties terminate the contractual cooperation, the personal data of the person concerned will be deleted within three months from the termination of the contractual cooperation. Data that, in accordance with a special legal obligation, will need to be stored for a longer period of time will only be stored for the necessary time in accordance with the relevant special law.

VI. The rights of data subjects in accordance with the Personal Data Protection Act

1. Right to information

The affected person has the right to request information from the company at any time about the provided personal data that the company processes, their origin, the purpose of personal data processing, the category of personal data processing, the identification of the recipient or the category of recipient to whom the personal data was provided and the period of storage of personal data , if this is not possible, information on the criteria for its determination.

2. Right of access to personal data

The person concerned has the right to access his personal data and the right to provide his personal data. In this case, if the person concerned requires access to personal data, the company is obliged to grant such access without delay. For the repeated provision of personal data requested by the data subject, the company may charge a reasonable fee corresponding to administrative costs. The company is obliged to provide personal data to the person concerned in a manner according to his request.

3. The right to withdraw consent to the processing of personal data

If the person concerned has given consent to the processing of personal data, he is entitled to revoke it at any time, without giving reasons and with immediate effect. In case of revocation of the granted consent of the person concerned, the company will stop processing the personal data of the person concerned and the personal data will be deleted, if there is no other legal basis for their further processing. The withdrawal of consent to the processing of personal data will not affect the legality of the processing based on the consent before its withdrawal.

4. The right to correct personal data

The person concerned has the right to correct incorrect personal data concerning him. The affected person also has the right to supplement his/her incomplete personal data. In the event that the stored data is incorrect or incomplete, the data subject may request its correction at any time.

5. The right to erasure of personal data

The affected person has the right to delete personal data processed by the company.

The company is obliged to delete the personal data of the data subject without undue delay, if the data subject has exercised the right to deletion, if:

a) personal data are no longer necessary for the purpose for which they were obtained or otherwise processed,

b) the person concerned revokes his consent, on the basis of which the processing of personal data is carried out, and there is no other legal basis for the processing of personal data,

c) the person concerned objects to the processing of personal data according to § 27 par. 1 and 2 of the Personal Data Protection Act,

d) the personal data of the person concerned is processed illegally.

The company will delete personal data relating to the person concerned without undue delay, at the latest within one month after exercising this right. Deletion of the personal data of the person concerned will be carried out based on the request of the person concerned, which the person concerned sends to the e-mail address of the company listed at the end of this document. If the deletion of the data subject's personal data contradicts the legal obligations to retain data, the data subject's personal data will not be deleted. The right to erasure of personal data shall not apply in the cases referred to in § 23 par. 4 of the Personal Data Protection Act.

6. The right to limit the processing of personal data

The person concerned has the right to limit the processing of personal data if:

a) the person concerned objects to the correctness of the personal data, during the period allowing the company to verify the correctness of the personal data,

b) the processing of personal data is illegal and the data subject objects to the deletion of personal data and instead requests a limitation of their use,

c) the company no longer needs personal data for the purpose of processing personal data, but the data subject needs them to assert a legal claim, or

d) the person concerned objects to the processing of personal data according to § 27 par. 1 of the Personal Data Protection Act, until it is verified whether the legitimate reasons on the part of the company prevail over the legitimate reasons of the person concerned.

7. Right to portability of personal data

In the event that the person concerned requests from the company his personal data, which the company processes, the company will issue or transfer this personal data to the person concerned or to another person who is the operator, in a structured and commonly used readable format. The above applies only if it is technically possible.

8. The right to object to the processing of personal data

The person concerned has the right to object to the processing of personal data for the purpose of direct marketing, including the so-called profiling.

The person concerned has the right to object to the processing of personal data concerning him for reasons related to his specific situation. In the event of such an objection, the company will not further process the personal data of the person concerned, unless there are necessary legitimate reasons for their further processing or reasons for proving/asserting the company's legal claims.

9. The right not to be the subject of automated individual decision-making, including profiling

The person concerned has the right not to be subject to a decision based solely on the automated processing of personal data, including the so-called profiling and which has legal effects that relate to it or similarly significantly affect it. This right of the person concerned does not apply if the decision is:

a) necessary for the conclusion or performance of the contract between the person concerned and the company,

b) carried out on the basis of a special regulation or an international treaty to which the Slovak Republic is bound, and which also provide for appropriate measures guaranteeing the protection of the rights and legitimate interests of the person concerned,

c) is based on the express consent of the person concerned.

10. Right to File a Complaint

If the person concerned wants to file a complaint, he can do so by sending an e-mail to the email address: info@weit.sk or by sending a written complaint to the address: Kríková 18, 821 07 Bratislava.

11. The right to file a motion to initiate proceedings

In case of suspicion of unauthorized processing of his personal data, the affected person has the right to submit a proposal for initiation of personal data protection proceedings to the Personal Data Protection Office of the Slovak Republic, with registered office at Hraničná 4, 820 07 Bratislava, pursuant to § 100 of the Personal Data Protection Act.

VII. Cross-border transfer of personal data

1. The company will not carry out any cross-border transfer of personal data of the persons concerned to a third country that does not guarantee an adequate level of personal data protection. The personal data of the persons concerned, which will be processed, will not be transferred from the territory of the member states of the European Union to third countries.

VIII. Questions regarding the protection of personal data of the person concerned - contact the company/operator

If the person concerned has questions or inquiries regarding the protection of his personal data, he can contact the company weit s. r. about.:

weit s. r. o.

headquarter: Kríková 18, 821 07 Bratislava

e-mail contact: info@weit.sk

telephone contact: +421 947 930 494

This document on the protection of personal data takes effect from 01.01.2023.